Re: [graylog2] Search advise

2015-04-13 Thread Joan Picanyol i Puig
* Mark Moorcroft plak...@gmail.com [20150410 23:37]: This is probably a dumb newb question, but at this moment it's not obvious to me. If I have a saved search like: dropping event AND queue is full Is it possible to see the list of Sources with the number of logged events per source

[graylog2] Search advise

2015-04-10 Thread Mark Moorcroft
This is probably a dumb newb question, but at this moment it's not obvious to me. If I have a saved search like: dropping event AND queue is full Is it possible to see the list of Sources with the number of logged events per source ONLY, instead of 10 pages of results? I guess you could